[Webkit-unassigned] [Bug 30898] Browser crash by deeply nested elements

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Nov 11 01:59:44 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=30898


TAMURA, Kent <tkent at chromium.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #42847|0                           |1
        is obsolete|                            |
  Attachment #42940|                            |review?
               Flag|                            |




--- Comment #6 from TAMURA, Kent <tkent at chromium.org>  2009-11-11 01:59:43 PST ---
Created an attachment (id=42940)
 --> (https://bugs.webkit.org/attachment.cgi?id=42940)
Proposed patch

We can avoid the stack overflow by this patch.  However,
 * It adds 1 int field to RenderObject.  It'll increase memory consumption.
 * The test is always timed out.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list